CVE-2009-4447

Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct request to admin/guestbook.admin.php.

Date published : 2009-12-29

http://www.securityfocus.com/bid/37466

http://www.exploit-db.com/exploits/10626